CVE-2025-64718: js-yaml has prototype pollution in merge (<<)

Author: maximthomas

openam-ui/openam-ui-api/package-lock.json

@@ -50,15 +50,20 @@
     "rimraf": "2.5.4",
     "sinon": "1.17.6",
     "sinon-chai": "2.8.0",
-    "ajv": "^8.16.0"
+    "ajv": "^8.16.0",
+    "js-yaml": "^3.14.2"
   },
   "overrides": {
     "mocha": {
       "flat": "5.0.2"
     },
     "eslint": {
       "shelljs": "^0.8.5",
-      "ajv": "$ajv"
+      "ajv": "$ajv",
+      "js-yaml": "$js-yaml"
+    },
+    "grunt": {
+      "js-yaml": "$js-yaml"
     }
   }
 }